PT-2017-18695 · Allen · Allen Disk

Ghost · Publicado 2017-05-19 · Atualizado 2020-03-02 · CVE-2017-9091

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Allen Disk version 1.6

Description The issue concerns a CAPTCHA bypass in the login functionality. Specifically, the /admin/loginc.php endpoint does not properly check if the CAPTCHA code has been set, allowing for bypass by emptying the captcha field in the POST request. This can be achieved by manipulating the $ POST['captcha'] variable.

Recommendations For Allen Disk version 1.6, consider implementing a proper check for the CAPTCHA code to prevent bypass. As a temporary workaround, restrict access to the /admin/loginc.php endpoint until a proper fix is implemented. Additionally, ensure that the $ SESSION['captcha']['code'] variable is properly validated to prevent unauthorized access.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2017-9091

Produtos afetados

Allen Disk

Referências · 3

• https://github.com/s3131212/allendisk/issues/23 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2017-9091 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-9091 · Aviso do Fabricante